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CLAtMS : 

1. A security association establishment negotiation method 
comprising: 

forwarding identifying information and a request for a security 
association from a Mobile Node via a first interface to a first network element; 

forwarding the identifying information and the request for a 
security association from the first network element to a second network 
element via a second interface; 

performing negotiations between the first network element and 
the second network element via the second interface to establish a security 
association between the Mobile Node and the first network element, the 
second network element utilizing previously stored security association 
parameters of the Mobile Node; and 

upon agreement between the first network element and the 
second network element with regard to the security association parameters, 
the first network element forwarding the agreed-upon security association 
parameters to the Mobile Node via the first interface. 

2. The method of claim 1, wherein performing negotiations 
between the first network element and the second network element via the 
second interface includes exchanging parameters for the establishment of the 
Security Association. 
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3. The method of claim 2, wherein the first interface comprises a 
wireless interface to forward information between the Mobile Node and the 
first network element. 

4. The method of claim 2, wherein the first network element is 
connected to a first gateway. 

5 The method of claim 4, wherein the first gateway comprises a 
AAA (Authentication, Authorization, and Accounting) server. 

6. The method of claim 1 , wherein the second network element 
comprises a subscriber database and an authentication center. 

7. The method of claim 6, wherein the second network element 
further comprises a second gateway connected to the subscriber database 
and authentication center. 

8. The method of claim 7, wherein the second gateway comprises 
a AAA (Authentication, Authorization, and Accounting) server. 

9. A security association establishment negotiation apparatus for a 
Mobile Node, the apparatus comprising: 

a first interface connected to a first network element to forward 
identifying information and the request for a Security Association from the 
Mobile Node to the first network element; and 
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a second interface connected between the first network element 
and a second network element to forward the identifying information and the 
request for a Security Association from the first network element to the second 
network element, the first network element performing negotiations between 
the first network element and the second network element to establish a 
Security Association between the Mobile Node and the first network element 
utilizing Security Association parameters of the Mobile Node previously stored 
in the second network element; 

wherein, upon agreement between the first network element and 
the second network element with regard to the Security Association 
parameters, the first network element forwarding the agreed-upon Security 
Association parameters to the Mobile Node via the first interface. 

10. The apparatus of claim 9, wherein performing negotiations 
between the first network element and the second network element via the 
second interface includes exchanging parameters for the establishment of the 
Security Association. 

1 1 . The apparatus of claim 10, wherein the first interface comprises 
a wireless interface to forward information between the Mobile Node and the 
first network element. 

12. The apparatus of claim 1 1 , wherein the first network element is 
connected to a first gateway. 
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1 3. The apparatus of claim 12, wherein the first gateway comprises 
a AAA (Authentication, Authorization, and Accounting) server. 

14. The apparatus of claim 10, wherein the second network element 
comprises a subscriber database and an authentication center. 

15. The apparatus of claim 14, wherein the second network element 
further comprises a second gateway connected to the subscriber database 
and authentication center. 

16. The apparatus of claim 15, wherein the second gateway comprises 
a AAA (Authentication, authorization, and accounting) sen/er. 
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